Terms of Service — AlbumQR
March 21, 2026
1. Service Provider
Bartosz Różycki, unregistered sole trader (działalność nierejestrowana), Poland.
Contact: team@albumqr.io
2. Definitions
3. Nature of Service
AlbumQR is a technical tool. The Service Provider does not moderate content and is not a party to the relationship between the Organizer and Participants.
By using the Service, you accept these Terms of Service and the Privacy Policy.
4. Organizer Obligations
⚠️ Required — consent for photos
The Organizer is responsible for informing participants about the collection of photos and obtaining any required consent for use of likeness under applicable law. The Service Provider bears no liability for violations of image rights.
The Organizer agrees to use the Service in compliance with the law, not to share access with unauthorised persons, to observe Plan limits, and to promptly remove content that infringes third-party rights.
5. Guest Obligations
A Guest may only upload photos to which they hold the rights and must not submit content that is illegal (pornography, violence, hate speech). By uploading a photo, the Guest grants the Organizer a non-exclusive licence to display it in the gallery, while retaining their own copyright.
6. Pricing and Payments
Current pricing at app.albumqr.io/pricing. Prices are gross (VAT-inclusive), one-time payments:
| Plan | Price (PLN) | Photo limit | Gallery active |
|---|---|---|---|
| Starter | 0 PLN (free) | 50 | 7 days |
| Basic | 59 PLN | 500 | 60 days |
| Premium | 149 PLN | 2000 | 90 days |
Note: Prices are listed in Polish Złoty (PLN). EUR pricing is displayed at checkout based on current exchange rates.
- Payments processed by Stripe Inc.
- One-time payment — no recurring charges
- Prices may change; changes do not affect already-purchased Plans
7. Right of Withdrawal
Consumers have the right to withdraw from the contract within 14 days (pursuant to applicable consumer protection law). This right is waived once the album has been activated and the consumer has provided explicit consent to immediate performance of the digital service. Withdrawal requests: team@albumqr.io.
8. Availability and Moderation
- Albums are active for the period defined by the Plan from the event date
- After expiry, Guests lose the ability to upload; data remains accessible to the Organizer
- The Service Provider targets 99% availability but does not guarantee uninterrupted operation
- The Service Provider may remove content that violates these Terms or the law without notice
9. Limitation of Liability
- The Service is provided "as is"
- The Service Provider is not liable for content submitted by users
- Liability is limited to the amount paid for the Plan
- This limitation does not apply to intentional damage or statutory consumer rights
10. Final Provisions
These Terms are governed by Polish law (Civil Code, Electronic Services Act, Consumer Rights Act). Organizers will be notified of material changes by email with 14 days' notice. Consumers may use the EU ODR platform: ec.europa.eu/consumers/odr.
Complaints and all other matters: team@albumqr.io — resolved within 14 business days.
11. Data Processing Agreement (Art. 28 GDPR)
This section constitutes a Data Processing Agreement (DPA) within the meaning of Article 28 of Regulation (EU) 2016/679 (GDPR). AlbumQR (Bartosz Różycki) acts as the data processor, while each Organizer using the Service acts as the data controller with respect to personal data of Guests processed through AlbumQR. Continued use of the Service constitutes acceptance of this DPA.
As data processor, AlbumQR commits to:
(a) Processing only on documented controller instructions:
AlbumQR processes Guests' personal data solely within the scope and purpose necessary to provide the Service (photo storage, gallery display, thumbnail generation) in accordance with the Organizer's documented instructions. Processing for purposes other than providing the Service requires separate written consent from the Organizer.
(b) Confidentiality obligations of authorised persons:
Persons authorised to process personal data on behalf of AlbumQR are bound by confidentiality obligations or are subject to an appropriate statutory duty of secrecy.
(c) Security measures (GDPR Art. 32):
AlbumQR has implemented appropriate technical and organisational measures, in particular: HTTPS/TLS encrypted transmission, direct photo upload to S3 via presigned URL (valid 15 min), access to private galleries protected by CloudFront signed cookies (24 h), rate limiting on upload endpoints, and encryption at rest (AWS S3 SSE-S3).
(d) Sub-processors:
The Organizer grants general authorisation for AlbumQR to engage the following sub-processors: Vercel Inc. (USA, hosting), Amazon Web Services (S3 eu-central-1 Frankfurt, CloudFront), Stripe Inc. (USA, payments), Google LLC (USA, OAuth / Analytics), Neon Inc. (database, AWS eu-central-1). AlbumQR will inform the Organizer in advance of any intended changes to sub-processors, giving the Organizer the opportunity to object.
(e) Assistance with data subject rights:
AlbumQR will assist the Organizer in fulfilling its obligation to respond to requests from data subjects exercising their rights (access, rectification, erasure, portability, restriction, objection). Requests should be addressed to: team@albumqr.io.
(f) Deletion or return of data after service termination:
Upon termination of the agreement or expiry of the subscription, AlbumQR will delete or return the personal data of the Organizer and Guests upon written request (GDPR Art. 28(3)(g)), unless Union or Member State law requires storage of the data.
(g) Cooperation and audits:
AlbumQR will make available to the Organizer all information necessary to demonstrate compliance with the obligations set out in Art. 28 GDPR, and will allow for and contribute to audits and inspections (GDPR Art. 28(3)(h)). Audit requests should be directed to: team@albumqr.io.
(h) Notification of non-compliant instructions:
If AlbumQR determines that an instruction from the Organizer infringes the GDPR or other applicable Union or Member State data protection law, AlbumQR will promptly inform the Organizer before proceeding with the processing.
For DPA-related queries, contact: team@albumqr.io.